Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
File: QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft (raw, json)
Hash identifier: AE4C+dOMqQWAqEi4ESMLdePFbJZmrxoAbF6/J8/ovlM=
Subject key identifier: E9:A9:F6:11:BA:E0:A5:34:34:86:C7:C7:A4:05:87:BC:B7:A1:14:11
Authority key identifier: 41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
Certificate issuer: /CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Certificate serial: 01989C70456617B899783241DB46BA6DCE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
Manifest number: 15BC
Signing time: Tue 12 Aug 2025 04:01:00 +0000
Manifest this update: Tue 12 Aug 2025 04:01:00 +0000
Manifest next update: Wed 13 Aug 2025 04:01:00 +0000
Files and hashes: 1: QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl (hash: XXddamEo85aqiDe3XfJ1ebFk7F9hzD+nyyD7OYX0JHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:70:45:66:17:b8:99:78:32:41:db:46:ba:6d:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Validity
Not Before: Aug 12 04:01:00 2025 GMT
Not After : Aug 13 04:01:00 2025 GMT
Subject: CN=e9a9f611bae0a5343486c7c7a40587bcb7a11411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:5b:c3:d9:e7:3f:31:d3:77:bf:02:1b:3b:
78:55:8f:2f:63:92:74:2b:ad:7c:78:bd:05:49:2f:
27:e8:64:e5:ed:d4:a8:7e:8a:75:c7:29:c7:6a:e6:
9d:cd:4c:67:30:86:2b:b5:49:3e:62:a2:ed:de:9c:
6c:0f:d4:36:3c:2f:9e:88:32:7a:d8:96:a7:c0:34:
02:bf:76:c0:5a:b8:51:d2:63:3b:2a:04:ae:96:2f:
01:50:42:40:58:18:07:0a:dc:d1:4d:93:5f:cb:2f:
a7:8f:2a:60:9f:85:41:a9:35:9d:c3:0a:a3:06:1f:
95:4c:a9:ca:8b:7f:07:09:e4:d8:c6:57:16:71:0b:
6f:18:f1:2b:b9:d6:6f:bc:66:bb:89:cc:84:cc:6b:
a4:71:8b:a2:55:f3:a4:8d:2f:55:6e:ee:01:dc:ac:
90:4d:d3:66:6b:52:3a:db:25:58:8a:61:85:30:35:
f5:65:a6:ef:4b:d5:6c:99:d2:f0:89:e8:5d:37:b1:
67:c4:57:74:83:7c:54:bb:84:93:48:7b:fe:29:7c:
29:22:8a:60:3f:05:f7:be:71:23:70:75:61:3a:47:
57:88:88:19:ff:7c:6e:e6:ad:36:38:27:bf:8a:17:
bc:ad:19:f1:84:53:0e:40:de:70:5a:35:12:4f:f6:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:F6:11:BA:E0:A5:34:34:86:C7:C7:A4:05:87:BC:B7:A1:14:11
X509v3 Authority Key Identifier:
keyid:41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:9a:7f:19:e1:f2:94:79:12:4d:75:22:b2:4a:21:90:c1:
02:13:15:a6:73:d8:84:b6:cc:8a:d3:ca:f3:59:1b:48:ec:8b:
d5:f5:9f:e3:bd:27:b8:c1:50:ed:27:59:84:32:bf:37:28:0c:
ce:34:cd:c1:34:13:ea:d9:0b:58:a0:98:94:aa:23:fa:dd:16:
01:5d:09:66:7b:ff:f7:a5:e1:40:27:89:75:36:76:05:79:4b:
df:03:0c:33:42:05:c4:e3:a0:be:c5:9e:2e:c9:69:68:82:21:
af:4e:8b:3e:f4:ad:85:1d:b3:f9:75:11:3e:e1:6a:7f:83:77:
04:ab:15:40:c8:dc:d2:e5:43:da:e5:1f:9a:8e:e2:3e:2f:ba:
df:70:37:be:5b:87:e9:e0:45:9f:bd:bd:87:82:ab:65:3a:73:
c8:fd:4e:b1:68:9c:21:5f:81:bd:a6:4e:c7:52:2b:d2:8a:04:
d3:b0:d9:a9:de:2e:5a:84:69:e0:9a:fe:66:50:5b:16:cc:39:
a3:1a:cf:58:25:d0:2b:33:39:cb:07:08:cb:ed:eb:39:51:02:
d0:b4:6d:19:5f:a1:43:ce:de:45:6c:1d:54:c1:a5:75:df:c7:
63:a2:80:40:58:a1:29:dd:2e:b4:17:b4:f4:85:55:73:bc:0a:
f4:bd:ed:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiccEVmF7iZeDJB20a6bc6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzg1Y2I1ZmM2YjQwZmRmMTRmNzJhNmQyNWY0MTQzYzE3
YzMxN2MwHhcNMjUwODEyMDQwMTAwWhcNMjUwODEzMDQwMTAwWjAzMTEwLwYDVQQD
EyhlOWE5ZjYxMWJhZTBhNTM0MzQ4NmM3YzdhNDA1ODdiY2I3YTExNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshtbw9nnPzHTd78CGzt4VY8vY5J0
K618eL0FSS8n6GTl7dSofop1xynHauadzUxnMIYrtUk+YqLt3pxsD9Q2PC+eiDJ6
2JanwDQCv3bAWrhR0mM7KgSuli8BUEJAWBgHCtzRTZNfyy+njypgn4VBqTWdwwqj
Bh+VTKnKi38HCeTYxlcWcQtvGPErudZvvGa7icyEzGukcYuiVfOkjS9Vbu4B3KyQ
TdNma1I62yVYimGFMDX1ZabvS9VsmdLwiehdN7FnxFd0g3xUu4STSHv+KXwpIopg
PwX3vnEjcHVhOkdXiIgZ/3xu5q02OCe/ihe8rRnxhFMOQN5wWjUST/YGrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmp9hG64KU0NIbHx6QFh7y3oRQRMB8GA1UdIwQY
MBaAFEF4XLX8a0D98U9yptJfQUPBfDF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUt
ZTQ2ZWM1YjliMDZjLzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUtZTQ2ZWM1YjliMDZj
LzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwGafxnh
8pR5Ek11IrJKIZDBAhMVpnPYhLbMitPK81kbSOyL1fWf470nuMFQ7SdZhDK/NygM
zjTNwTQT6tkLWKCYlKoj+t0WAV0JZnv/96XhQCeJdTZ2BXlL3wMMM0IFxOOgvsWe
LslpaIIhr06LPvSthR2z+XURPuFqf4N3BKsVQMjc0uVD2uUfmo7iPi+633A3vluH
6eBFn729h4KrZTpzyP1OsWicIV+BvaZOx1Ir0ooE07DZqd4uWoRp4Jr+ZlBbFsw5
oxrPWCXQKzM5ywcIy+3rOVEC0LRtGV+hQ87eRWwdVMGldd/HY6KAQFihKd0utBe0
9IVVc7wK9L3t7Q==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:43:46 2025 by rpki-client